Cisco IP Phone 8800 Series CVE-2019-1763 Unauthorized Access Vulnerability

Bugtraq ID:	107499
Class:	Access Validation Error
CVE:	CVE-2019-1763
Remote:	Yes
Local:	No
Published:	Mar 20 2019 12:00AM
Updated:	Mar 20 2019 12:00AM
Credit:	David Gullasch of modzero AG
Vulnerable:	Cisco Wireless IP Phone 8821-EX 11.0(4)SR3 Cisco Wireless IP Phone 8821-EX 11.0(4)SR2 Cisco Wireless IP Phone 8821-EX 11.0(4)SR1 Cisco Wireless IP Phone 8821 11.0(4)SR3 Cisco Wireless IP Phone 8821 11.0(4)SR2 Cisco Wireless IP Phone 8821 11.0(4)SR1 Cisco IP Phone 8800 Series 12.5(1) Cisco IP Phone 8800 Series 11.0(4)SR2 Cisco IP Conference Phone 8832 12.1
Not Vulnerable:	Cisco Wireless IP Phone 8821-EX 11.0(5) Cisco Wireless IP Phone 8821 11.0(5) Cisco Unified IP Conference Phone 8831 0 Cisco IP Phone 8800 Series 12.6(1)MN128 Cisco IP Phone 8800 Series 12.5(1)SR2 Cisco IP Phone 8800 Series 12.5(1)SR1.3 Cisco IP Phone 8800 Series 12.5(1)ES2 Cisco IP Phone 8800 Series 11.0(5.12) Cisco IP Phone 8800 Series 11.0(5) Cisco IP Phone 8800 Series 11.0(4)MN63 Cisco IP Conference Phone 8832 12.5(1)SR1

Cisco IP Phone 8800 Series CVE-2019-1763 Unauthorized Access Vulnerability

Cisco IP Phone 8800 Series is prone to an unauthorized-access vulnerability.

An attacker can exploit this issue to bypass the security mechanism and gain unauthorized access or cause denial-of-service condition. This may lead to further attacks.

This issue is being tracked by Cisco bug ID CSCvn56175 and CSCvo58414.

Cisco IP Phone 8800 Series CVE-2019-1763 Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.